Defining Policy Rules

Policy rules (not to be confused with application policies) define the security standards that your managed environment is expected to conform to. After policies have been defined and validated against the managed environment, any keys violating policies are flagged in User Portal (as well as in Key Manager). Application owners will be able to see the policies that their application keys violate. Policies may also provide information about the recommended actions for keys that violate certain policies.

Policies are created and validated via the Key Manager GUI, on the Policies→Policy rules page. For more information about managing policies, see the PrivX Key Manager Administrator Manual.

note

Policy rules must be validated against the managed environment to update policy-violation information to User Portal. To automatically validate the managed environment against your policies, you can set the global Key Manager setting How often to validate environment against policy (policy_validation_interval).